nocobase-plugin-manage

# Goal Provide a deterministic plugin workflow using **only** direct `nb plugin` commands: - `nb plugin list [--env <env>]` - `nb plugin enable [--env <env>] <plugin...>` - `nb plugin disable [--env <env>] <plugin...>` This skill must not route plugin operations through wrapper scripts or fallback channels. # Scope - Inspect plugin inventory/state from CLI runtime (`nb plugin list [--env <env>]`). - Enable plugins with `nb plugin enable [--env <env>] <plugin...>`. - Disable plugins with `nb plugin disable [--env <env>] <plugin...>`. - Always perform readback with `nb plugin list` after writes. # Non-Goals - Do not use `docker compose exec ... yarn nocobase plugin ...`. - Do not use API action routes as fallback. - Do not use legacy ctl commands or wrapper scripts for plugin operations. - Do not support `install/remove` in this skill version. # Input Contract | Input | Required | Default | Validation | Clarification Question | |---|---|---|---|---| | `action` | yes | none | one of `inspect/enable/disable` | "Which action should I run: inspect, enable, or disable?" | | `plugins` | enable/disable: yes | none | non-empty string array | "Which plugin(s) should be changed?" | | `runtime_env_name` | no | current env | configured CLI env name | "Which env should I target?" | | `base_dir` | no | current working directory | existing path | "Which directory should `nb` commands run in?" | | `execution_mode` | no | `safe` | one of `safe/fast` | "Use safe mode or fast mode?" | | `verify.timeout_seconds` | no | `90` | integer `10..600` | "What verification timeout should I use?" | Rules: - Keep compact invocation: `Use $nocobase-plugin-manage <action> [plugin...]`. - `safe` mode requires pre-state + post-state readback. - If user says "you decide", use defaults above. # Mandatory Clarification Gate - Max clarification rounds: `2` - Max questions per round: `3` - Before `enable/disable`, `plugins` must be resolved. - If required inputs are missing, stop mutation and ask. # Workflow 1. Parse request and normalize to `inspect/enable/disable`. 2. Capture pre-state via `nb plugin list` when `execution_mode=safe`. 3. Execute action with direct command: - `inspect`: `nb plugin list [--env <env>]` - `enable`: `nb plugin enable [--env <env>] <plugin...>` - `disable`: `nb plugin disable [--env <env>] <plugin...>` 4. Readback polling via `nb plugin list` until timeout. 5. Return structured output. # Safety Gate - High-impact actions: - disable auth/ACL/system-critical plugins - batch disable in shared environments - Secondary confirmation template: - "Confirm execution: `{{action}}` for `{{plugins}}`. Type `confirm` to continue." - Rollback guidance: - failed disable: run `nb plugin enable [--env <env>] <plugin...>` - failed enable: run `nb plugin disable [--env <env>] <plugin...>` (only when user requests rollback) # Verification Checklist - `action` and `plugins` resolved. - Command path uses direct `nb plugin` only. - Pre-state captured in `safe` mode. - Post-state readback captured. - `enable` => plugin shows `enabled=true`. - `disable` => plugin shows `enabled=false`. - Timeout reported as `pending_verification`. # Minimal Test Scenarios 1. `inspect` uses `nb plugin list`. 2. `enable` uses `nb plugin enable` then readback by `nb plugin list`. 3. `disable` uses `nb plugin disable` then readback by `nb plugin list`. 4. Missing plugin input blocks mutation with clarification. # Output Contract Always return: - `request` - `commands` - `pre_state` - `post_state` - `verification` (`passed|failed|pending_verification`) - `assumptions` - `next_steps` # Reference Loading Map | Reference | Use When | |---|---| | [V1 Runtime Contract](references/v1-runtime-contract.md) | Mapping plugin actions to final `nb plugin` commands. | | [Test Playbook](references/test-playbook.md) | Checking inspect/enable/disable behavior and fallback guarantees. | # References - [V1 Runtime Contract](references/v1-runtime-contract.md) - [Test Playbook](references/test-playbook.md)